RHSA-2024:8675: Important: buildah security update
Important: buildah security update
Other sources
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. <br>Security Fix(es):<br><li> buildah: Buildah allows arbitrary directory mount (CVE-2024-9675)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:8675?
The severity of RHSA-2024:8675 is classified as Important.
How do I fix RHSA-2024:8675?
To fix RHSA-2024:8675, update the buildah package to version 1.26.8-2.el9_0 or later.
Which systems are affected by RHSA-2024:8675?
RHSA-2024:8675 affects various Red Hat Enterprise Linux products across different architectures.
What is the purpose of the buildah package mentioned in RHSA-2024:8675?
The buildah package provides tools for building OCI container images.
Is there a workaround for RHSA-2024:8675?
There are no specific workarounds provided for RHSA-2024:8675; updating to the patched version is recommended.